TECHNICAL SYSTEMS TESTING - Infrastructure & Security Testing (Security Evaluation & Compliance Testing)


	Evaluation & Compliance Testing
	+	Information Systems Security Audit
	+	Information Systems Controls
	>	Technical Controls
	+	Physical and Environmental Securiy
	Other
	+	Penetration Testing & Network Surveying
	+	Load Testing & Stress Testing
	+	Scalability Assessment
	+	Internal Controls and Operating Procedures (ICOPs) Development
	+	Contingency Planning & Incident Response Preparation
	+	Technical Standards Document (TSD) Development
	+	Project Management
	+	Interactive Testing
	+	Transfers of Approval




	Technical Controls The Technical Controls Evaluations generally require the most time depending on the complexity of the Systems being assessed, and typically cover (but are not limited to) the following elements: • Infrastructure Design, • Network Surveying & Penetration Testing, • Network and Communications Security, • Logical Access Controls, • Operating Systems Security, • Malicious Software Controls, • Database Design and Configuration, • Cryptographic Controls, • System Monitoring, • Reporting and Logging, and • System Development Controls.